Can't add BESadmin permissions to all users
We are running Exchange 2010. When I try to create besadmin account and assign access/send as permissions it to all users, I get "Cannot process argument transformation on parameter
'Identity'" message. Here is the result:
[PS] C:\Windows\system32>Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRi ghtsReceive-As, ms-Exch-Store-Admin Cannot process
argument transformation on parameter 'Identity'. Cannot convert the "System.Collections.ArrayList" value of type "System.Collections.ArrayList" to type "Microsoft.Exchange.Configuration.Tasks.ADRawEntryIdParameter". + CategoryInfo : InvalidData: (
[Add-ADPermission], ParameterBindin...mationException + FullyQualifiedErrorId : ParameterArgumentTransformationError,Add-ADPermission
What do I miss? or which parameter 'Identity' do I need to add it to the command?
Bob Lin, MS-MVP Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.howtonetworking.com
November 29th, 2010 4:58pm
Your command matches the one I have in my notes.
Is this a flat domain, or are child domains involved?
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources
Free Windows Admin Tool Kit Click here and download it now
November 29th, 2010 5:06pm
This is what I did when moved to 2007.
take a look at Blackberry: KB12483 & KB14502
add-exchangeadministrator besadmin -role ViewOnlyAdmin
get-mailboxserver exch07 | add-adpermission -user besadmin -accessrights GenericRead, GenericWrite -extendedrights Send-As, Receive-As, ms-Exch-Store-Admin
also I had to do this on a 2003 DC
http://support.microsoft.com/kb/907434
not sure if you have to do this on a 2008
November 29th, 2010 5:23pm
The commands for Exchange 2010 are slightly different.
If you get the BES 5.02 installation instructions from RIM's web site, it outlines all of the commands that are required.
The view only admin command is different for example.
Simon.Simon Butler, Exchange MVP
Blog |
Exchange Resources
Free Windows Admin Tool Kit Click here and download it now
November 29th, 2010 6:23pm
Thank you for all inputs. My problem is I copied the command line and pasted it. However, there is not a space between "ExtendedRightsReceive-As". After I gave a space "ExtendedRights Receive-As", it works.
Thank you.
Get-MailboxDatabase | Add-ADPermission -User "BESAdmin" -AccessRights ExtendedRight -ExtendedRights Receive-As, ms-Exch-Store-Admin
Bob Lin, MS-MVP Networking, Internet, Routing, VPN Troubleshooting on
http://www.ChicagoTech.net
How to Setup Windows, Network, VPN & Remote Access on
http://www.howtonetworking.com
November 30th, 2010 11:29am
Just an FYI. ADSIedit works really well too for this if your struggling with the power shell commands. Both accomplish the same thing.
Free Windows Admin Tool Kit Click here and download it now
December 2nd, 2010 12:54pm